Hot Issues in Computer Security: 2005

Transcription

1 Hot Issues in Computer Security: 2005 NARUC: February 15, 2005 John Simek and Sharon Nelson Vice President and President Sensei Enterprises, Inc. Fairfax, VA

2 Veritas and Symantec Merger Expected to simplify and enhance network security Survived antitrust review Stockholders must approve Merger targeted for end of 2 nd quarter

3 Hottest Issue for 2005: What Sys Admins Think Phishing 10% Viruses 23% Spyware 67%

4 SPYWARE When you look at your computer, is it looking back at you?

5 What is spyware? Definitions vary/ Generally, it is: Surreptitiously installed To monitor a user s conduct Transmitting data to or holding it for a third party.

6 What is spyware for? Monitoring husbands, wives, and lovers Monitoring employees Monitoring children Industrial espionage Marketing research/tailor ads Identity theft To make zombie machines to relay spam

7 Is adware spyware? Generally, yes, though less pernicious Usual intent is research or targeting you for ads or spam Most adware would be outlawed by new federal law Adware is on almost all machines

8 The Grim Stats About Spyware 85-90% of all machines are infected Microsoft operating systems and software are the most vulnerable No one software is a silver bullet Failure to protect client data: per se malpractice?

9

10 How do you get spyware? You download something and spyware is bundled with it (most common) You open an e-greeting card You try to close or say no to a dialog box and that triggers the spyware install

11 How do you get spyware? You go to a website and spyware is installed when you drive by Beware of Adult web sites, the worst offenders, also teen-related sites, gaming sites, screensavers, freebies generally You open an or attachment containing spyware

12

13 Spyware/Adware Hotbar Living Waterfall Webshots Weathercast BargainBuddy SaveNow Claria (Gator) Ceres

14 Spyware indicators Tons of pop-ups ads Internet home page changes New toolbars appear New icons in your system tray Random error messages New programs in the start-up group

15 Spyware indicators Machine performance suddenly sluggish More lock-ups and blue screens Significant increase in hard drive activity Inexplicable new behavior of machine

16

17 Top reviewed spyware Specter Pro SpyAgent IAmBigBrother eblaster GoldenEye

18 Anti-spyware software There is no silver bullet 2-3 programs recommended Volatile market Recommendations change every few months You can still get spyware You must scan periodically Safe computing is still important

19

20

21

22

23

24 Blocking Pop-Ups, Spyware, Adware Free Google toolbar to block pop-ups Ad-aware, free for personal use PestPatrol - $29.95 (download) SpySweeper - $29.95 (download)

25 Corporate Anti-Spyware Solutions Ad-Aware Professional - $39.95 PestPatrol Corporate - $34.99 (2-14) PestPatrol Corporate - $30.99 (15-24) SpySweeper Enterprise - $31.96 (10-24) SpySweeper Enterprise - $29.96 (25-99)

26 Best Practice: Two or more anti-spyware packages

27 Federal law Use of wiretap laws largely unsuccessful Law based on old technology SPY ACT overwhelming passed House in 2004, didn t get through Senate Securely Protect Yourself Against Cyber Trespass Act Passage of this law, or something similar, expected this session

28 U.S. v. Councilman 1 st Cir. June 2004 Offered customers accounts Read their from Amazon.com Charged with violating ECPA (Electronic Communications Privacy Act) in RAM when copied, therefore not intercepted. In storage, not transit. Ruling vacated and will be heard en banc

29 U.S. v. Ropp C.D. Cal. Oct 2004 Hardware keystroke logger did not violate ECPA Transmission of keystrokes from keyboard to computer does not affect interstate commerce Not within statute s purview

30 State Anti-spyware law California and Utah have laws Legislation pending in Michigan, Pennsylvania, New York, and Iowa VA has computer trespass and computer privacy laws that apply Ditto for Kansas, Tennessee, Rhode Island, Washington and North Carolina

31 Software monitoring employees Legal everywhere Connecticut and Delaware require that employees be given notice before or Net access monitored

32 Want to know if there s spyware on your computer? Take the free systems audit at: Or the corporate audit at: start.php

33 Phishing Hackers commonly replace f with ph They fish for financial info and credit cards in the sea of Internet users Phishing is also a tribute to phreaking, the original hacker s term for hacking, used by phone phreakers hacking phone companies with blue boxes

34 Anti-Phishing Working Group

35

36

37 Fighting phishing Don t click on pop-up boxes or requesting personal info legitimate inquiries won t be made this way Keep anti-virus and anti-spyware software up to date Don t send financial/personal info via Do Net orders only through secure sites with known vendors

38 The Can-Spam Act a/k/a The I Can Spam Act Compliance under 3% Growth exceeds 3% No gain Best current solutions Blacklists, filters and whitelists Coming solutions Caller ID for Black Penny day

39 Voice Communications Voice Mail Answer Machines PBX Routing VoIP

40 VoIP Secure Logs Do Not Use Shared Media Devices Periodic Audits Encrypt Network Redundancy 911 Services VoIP Aware Firewalls

41 Wireless Networks Default Values Drive By War Chalking Wi-Fi Wardriving RSA Security: 63% of surveyed networks are left at default values Used by Spammers

42 Wi-Fi Wardriving

43 Wireless APs

44 Linksys Wireless SSIDDefaults

45 Metadata Data About Data Word WordPerfect Excel PowerPoint Scrubbers Metadata Assistant RFT

46

47 Metadata Assistant

48

49 Incidents Reported Year Incident s , ,41 2, Year Incidents , Year , , , Incident s 21, , , ,52 9